Automated package-squatting & slopsquatting detection signals across PyPI and npm — these are automated, unconfirmed signals. Use them to find candidates to investigate, but don't automatically assume they're malicious.
Sorted by risk score. Cleared packages hidden by default — add verdict:benign_community to include. Packages the registry has since removed are hidden too — see them on the Taken Down tab or add state:taken_down. Very risky packages require manual human audit. • Tag & Signal Legend →
verdict: (malicious, suspicious, unverified_high_signal, squatted_stub…),
ecosystem: (pypi/npm), hook: (install, network, pth, gyp, worm, c2, creds, binary, env, stealer, any — malicious hooks & behaviors),
email:, domain:, keyword:, version: (comma = OR within a field, space = AND across fields),
age:<6h / age:>90d (combine both for a range),
state:live / state:taken_down (registry liveness — the feed defaults to state:live),
lead:>7d (days we had a since-removed package flagged while it was still up),
or a bare word for a package-name search.
| Package | Score ▼ | Age | Users | Lines | Growth | Verdict | Targeted | Ecosystem | Version | Author | Email domain | Signals |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Devops Guru.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Devops Agent.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Device Farm.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Detective.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Deadline.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for DAX.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Datasync.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for Dataexchange.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Secret-free local workflow CLI for QKERN
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Publicador de eventos para o coletor do motor de eventos, sem dependencias e sem API exclusiva do Node
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Databrew.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Database Migration Service.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Data Pipeline.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Customer Profiles.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cost Optimization Hub.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cost Explorer.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Cost And Usage Report Service.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Controltower.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Controlcatalog.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | pypi | 0.3.0 | — | — | 🪝 | |
|
Package purpose: Python SDK for AWS Connectparticipant.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on PyPI → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Docker Sandboxes (sbx) microVM sandbox backend for Deep Agents
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Official Ghosty Studio CLI — configure, test and chat with your agents from the terminal. Built for humans and coding agents.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Cerebro CLI: scaffold and manage Schema Repos, and wire up local enforcement.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Edit self-hosted Confluence Data Center pages as Markdown. Macros, anchors and layouts stay intact.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: The notebook your AI writes to. MCP server to save, organize in folders, search and read notes in your free Notiero notebook, from Claude, Cursor, VS Code and more.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Xianying | — | 🪝 | |
|
Package purpose: Your coding agent says it's done. Make it prove it. Catches "tests pass" with no test run behind it, and tests made easier instead of code made right. Claude Code hook, agent skill, report card and CI check.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Check bookmark URLs or Canvas packages, compare sources with host-led research, and retain verifiable reports.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Create a standalone Asyra Starter App project
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Juan Cordero Pascual | — | 🪝 🌐 | |
|
Package purpose: Servidor MCP (Model Context Protocol) para Cisco Packet Tracer 9 — permite que un LLM como Claude o ChatGPT cree, edite y valide topologías de red en vivo (routers Cisco, switches, VLANs, OSPF, EIGRP, BGP, NAT, ACLs, VoIP, QoS, IPv6, wireless) a través de
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | shawicx | — | 🪝 | |
|
Package purpose: 从代码知识图谱生成结构化中文 Markdown Wiki 的 CLI 工具（LLM 增强叙述 + 纯规则回退）
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Scouter Protocol | — | 🪝 🌐 | |
|
Package purpose: Official TypeScript SDK for the Scouter Private Market Intelligence Platform
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | Kian | — | 🪝 | |
|
Package purpose: First-class PostgREST for Nuxt: typed clients, SSR-aware composables and auth-aware JWT forwarding. No Supabase required.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 8d | — | — | — |
Unverified Signal
|
— | npm | latest | CASOON | — | 🪝 | |
|
Package purpose: Declarative terminal demos for the web — DSL parser, compiler to asciicast v2, CLI, and Vite plugin.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A lazygit-style TUI for browsing, resuming and managing pi sessions (/lazy-panel)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Render your SEO landing pages in Next.js
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Typed client for the Postinger public API
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Postinger command-line interface
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: Database quality gate: lint Supabase migrations, Prisma and Drizzle schemas and SQLite files, audit a live Supabase project, carry debt in a baseline
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Setsuna SDK for TypeScript and JavaScript.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | Eric Jacobsen | — | 🪝 🌐 | |
|
Package purpose: Sync a Google Calendar into Sanity event documents, and read recurring events on the front end. Framework-agnostic.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: One local control plane for the AI coding subscriptions you already use.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | vannt-dev | — | 🪝 | |
|
Package purpose: A powerful CLI tool and Manifest V3 Browser Extension to convert Markdown files, text, or web pages into beautifully styled PDFs with Mermaid diagrams, LaTeX math, TOC, and themes.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Univer spreadsheet terminal (Table): Agent and user edits share revisioned workbook operations through the official right Sidebar + CSV export
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Shared seam between a right-Sidebar business surface and the DSH composer: one selection chip, one Host-context injection point, one write-back channel
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Command-line client for ENS-native versioned knowledge namespaces
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 🌐 | |
|
Package purpose: Developer-first interactive setup wizard and instrumentation tool for TraceIQ.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Possible Squatted Stub
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: General tooling for TypeScript projects: an ESLint flat-config preset, the prettier config, a base tsconfig and a doc linter.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A local MCP tool runtime for browser-based AI agents. No model proxy or inference API required by the runtime.
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | fan56 | — | 🪝 | |
|
Package purpose: dsh plugin: unattended approval gate — subagent/scheduled/cron approval requests get a bounded answer window, then settle with a fail-closed default instead of hanging forever (per origin or per session)
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||
| 40 | 9d | — | — | — |
Unverified Signal
|
— | npm | latest | — | — | 🪝 | |
|
Package purpose: A command-line tool for the Databronks CLI
Static code signals:
Signals reflect what our detector observed, not a confirmed determination of wrongdoing. View package on npm → |
||||||||||||